This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft File: Xx0w6XO1wcioD2BH3FKXeJQETD8.mft (raw, json) Hash identifier: SSr3wAUu3fGVk4jAb32I6gW4FtWB9uy5VWpNkOm0oXM= Subject key identifier: BA:36:9B:71:96:8F:9A:F9:D5:15:4D:43:4A:FE:46:5D:4E:19:73:7A Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Certificate serial: 0803 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft Manifest number: 07F7 Signing time: Tue 30 Dec 2025 20:29:40 +0000 Manifest this update: Tue 30 Dec 2025 20:29:40 +0000 Manifest next update: Tue 06 Jan 2026 20:29:40 +0000 Files and hashes: 1: Xx0w6XO1wcioD2BH3FKXeJQETD8.crl (hash: hf53/7Gdc/OGdMk9PoiDhbnqmcp5uGTNqaNefnm9sBE=) 2: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (hash: Z1uRbBBo1ykDesKGyzNhoAS+Q0kH4ecEfYyBIro/My0=) 3: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (hash: RDAuo0ukbkiW2gxiKwesJ3g1zTBr8ESAl1lXLcl6ncU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 20:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2051 (0x803) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Validity Not Before: Dec 30 20:29:40 2025 GMT Not After : Jan 6 20:29:40 2026 GMT Subject: CN=69543634-2b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4c:84:69:ad:83:b6:d6:2a:49:69:93:22:6a: de:b0:83:9b:aa:22:17:93:97:03:62:1b:f2:82:0e: a1:ad:52:ae:c1:a1:41:a6:ab:78:07:05:84:2f:95: 47:07:5d:a2:18:26:7f:b9:9d:17:fe:34:43:13:39: bc:0c:ab:94:32:30:c5:f2:ee:01:39:dd:6c:ad:a0: a4:f5:38:d7:7e:6c:82:98:f2:2c:30:0a:d6:4c:4c: a8:a4:85:ce:02:1e:f5:fd:28:2a:b6:7d:46:66:02: 1a:d9:43:11:f7:3b:ec:2f:01:1a:0a:ef:a3:8e:1c: b1:3e:13:00:9b:24:39:78:14:2f:22:f1:ee:42:b5: e7:12:9b:a9:6c:5d:29:b8:93:2d:02:88:7f:d6:4d: ee:18:57:46:6e:7a:e6:e0:96:60:c2:bb:7f:7a:af: 72:36:1d:27:34:b4:3d:f1:a3:8f:37:e1:58:a9:81: 78:67:a4:8b:cd:74:df:24:d9:88:de:c3:ce:37:a6: b8:bd:19:59:41:a7:47:06:a3:58:8c:fc:93:68:48: 90:bb:79:c9:65:1b:af:39:57:5d:0e:df:c8:33:28: e3:f6:a5:8c:06:fa:1c:ab:b7:65:0d:a3:f7:f1:98: 0d:7c:6d:64:5e:13:86:14:2a:ea:6f:9d:c3:1c:05: c9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:36:9B:71:96:8F:9A:F9:D5:15:4D:43:4A:FE:46:5D:4E:19:73:7A X509v3 Authority Key Identifier: keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:5f:08:0d:18:60:ab:f1:83:5d:02:d1:43:55:5a:06:72:5a: d0:a0:76:cc:65:87:e8:8d:63:7e:57:81:55:9b:00:8d:d5:7e: 27:11:90:2e:2e:0d:a7:f8:ac:df:c6:b9:6a:9b:47:d2:33:57: e9:fb:4a:03:94:56:36:99:9d:5e:2c:d5:9c:58:8b:12:a5:29: 57:41:0b:89:e7:38:4e:06:77:6e:4a:c0:c6:d5:63:81:0d:c6: 6d:d6:c7:f0:2b:b0:56:83:65:69:a3:45:40:df:65:c9:44:84: 16:d8:51:64:81:8d:fc:31:82:a0:ba:72:bf:c9:db:70:48:a0: ac:3d:e1:e3:79:5b:97:74:c0:ce:47:e2:52:67:38:aa:08:3b: 50:7c:ed:37:c5:da:69:1a:3b:97:e6:68:66:39:f0:0d:46:80: 40:62:09:d6:80:49:42:08:13:aa:6c:e9:c2:06:ac:d4:b5:19: 61:a6:4d:5e:d4:3c:85:1d:f9:3e:51:92:30:22:85:24:04:4c: 75:87:60:89:7b:69:2a:4a:dd:9e:a8:25:3b:04:bc:d3:52:b0: fa:65:bd:8c:9b:28:41:36:05:f6:17:9a:a6:7b:27:07:81:32: f8:93:6e:c0:d7:b2:94:cd:cf:69:46:ac:1f:0b:76:44:7a:0c: 21:ee:b1:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFMDkxMTAvBgNVBAUTKDVGMUQzMEU5NzNCNUMxQzhBODBGNjA0N0RDNTI5Nzc4 OTQwNDRDM0YwHhcNMjUxMjMwMjAyOTQwWhcNMjYwMTA2MjAyOTQwWjAYMRYwFAYD VQQDDA02OTU0MzYzNC0yYjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUyEaa2DttYqSWmTImresIObqiIXk5cDYhvygg6hrVKuwaFBpqt4BwWEL5VH B12iGCZ/uZ0X/jRDEzm8DKuUMjDF8u4BOd1sraCk9TjXfmyCmPIsMArWTEyopIXO Ah71/Sgqtn1GZgIa2UMR9zvsLwEaCu+jjhyxPhMAmyQ5eBQvIvHuQrXnEpupbF0p uJMtAoh/1k3uGFdGbnrm4JZgwrt/eq9yNh0nNLQ98aOPN+FYqYF4Z6SLzXTfJNmI 3sPON6a4vRlZQadHBqNYjPyTaEiQu3nJZRuvOVddDt/IMyjj9qWMBvocq7dlDaP3 8ZgNfG1kXhOGFCrqb53DHAXJ4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLo2m3GW j5r51RVNQ0r+Rl1OGXN6MB8GA1UdIwQYMBaAFF8dMOlztcHIqA9gR9xSl3iUBEw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkUwOS8wMUE1ODM3QTBG NjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdjaW9EMkJIM0ZLWGVKUUVU RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4MHc2WE8xd2Npb0QyQkgzRktYZUpRRVREOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkUwOS8wMUE1ODM3QTBGNjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdj aW9EMkJIM0ZLWGVKUUVURDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxXwgNGGCr8YNdAtFDVVoGclrQoHbMZYfojWN+V4FVmwCN1X4nEZAu Lg2n+Kzfxrlqm0fSM1fp+0oDlFY2mZ1eLNWcWIsSpSlXQQuJ5zhOBnduSsDG1WOB DcZt1sfwK7BWg2Vpo0VA32XJRIQW2FFkgY38MYKgunK/ydtwSKCsPeHjeVuXdMDO R+JSZziqCDtQfO03xdppGjuX5mhmOfANRoBAYgnWgElCCBOqbOnCBqzUtRlhpk1e 1DyFHfk+UZIwIoUkBEx1h2CJe2kqSt2eqCU7BLzTUrD6Zb2MmyhBNgX2F5qmeycH gTL4k27A17KUzc9pRqwfC3ZEegwh7rE6 -----END CERTIFICATE-----Generated at Wed Dec 31 02:00:52 2025 by rpki-client